CVE-2021-3972
Summary
| CVE | CVE-2021-3972 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-04-22 21:15:00 UTC |
| Updated | 2022-05-06 20:49:00 UTC |
| Description | A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Lenovo | Ideapad 3-14ada05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-14ada05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-14ada6 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-14ada6 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-14alc6 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-14alc6 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-14are05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-14are05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-14igl05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-14igl05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-14iil05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-14iil05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-14iml05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-14iml05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-14itl05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-14itl05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-14itl6 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-14itl6 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-15ada05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-15ada05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-15ada6 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-15ada6 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-15alc6 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-15alc6 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-15are05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-15are05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-15igl05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-15igl05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-15iil05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-15iil05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-15iml05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-15iml05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-15itl05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-15itl05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-15itl6 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-15itl6 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-17ada05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-17ada05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-17ada6 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-17ada6 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-17alc6 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-17alc6 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-17are05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-17are05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-17iil05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-17iil05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-17iml05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-17iml05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-17itl6 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-17itl6 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 5-15are05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 5-15are05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 5-15iil05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 5-15iil05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad Creator 5-15imh05 | - | All | All | All |
| Operating System | Lenovo | Ideapad Creator 5-15imh05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad Gaming 3-15arh05 | - | All | All | All |
| Operating System | Lenovo | Ideapad Gaming 3-15arh05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad Gaming 3-15imh05 | - | All | All | All |
| Operating System | Lenovo | Ideapad Gaming 3-15imh05 Firmware | All | All | All | All |
| Hardware | Lenovo | L3-15itl6 | - | All | All | All |
| Operating System | Lenovo | L3-15itl6 Firmware | All | All | All | All |
| Hardware | Lenovo | L340-15irh | - | All | All | All |
| Operating System | Lenovo | L340-15irh Firmware | All | All | All | All |
| Hardware | Lenovo | L340-15iwl | - | All | All | All |
| Operating System | Lenovo | L340-15iwl Firmware | All | All | All | All |
| Hardware | Lenovo | L340-15iwl Touch | - | All | All | All |
| Operating System | Lenovo | L340-15iwl Touch Firmware | All | All | All | All |
| Hardware | Lenovo | L340-17irh | - | All | All | All |
| Operating System | Lenovo | L340-17irh Firmware | All | All | All | All |
| Hardware | Lenovo | L340-17iwl | - | All | All | All |
| Operating System | Lenovo | L340-17iwl Firmware | All | All | All | All |
| Hardware | Lenovo | L3 15iml05 | - | All | All | All |
| Operating System | Lenovo | L3 15iml05 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 5-15ach6 | - | All | All | All |
| Hardware | Lenovo | Legion 5-15ach6a | - | All | All | All |
| Operating System | Lenovo | Legion 5-15ach6a Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 5-15ach6h | - | All | All | All |
| Operating System | Lenovo | Legion 5-15ach6h Firmware | All | All | All | All |
| Operating System | Lenovo | Legion 5-15ach6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 5-15imh6 | - | All | All | All |
| Operating System | Lenovo | Legion 5-15imh6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 5-15ith6 | - | All | All | All |
| Hardware | Lenovo | Legion 5-15ith6h | - | All | All | All |
| Operating System | Lenovo | Legion 5-15ith6h Firmware | All | All | All | All |
| Operating System | Lenovo | Legion 5-15ith6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 5-17ach6 | - | All | All | All |
| Hardware | Lenovo | Legion 5-17ach6h | - | All | All | All |
| Operating System | Lenovo | Legion 5-17ach6h Firmware | All | All | All | All |
| Operating System | Lenovo | Legion 5-17ach6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 5-17ith6 | - | All | All | All |
| Hardware | Lenovo | Legion 5-17ith6h | - | All | All | All |
| Operating System | Lenovo | Legion 5-17ith6h Firmware | All | All | All | All |
| Operating System | Lenovo | Legion 5-17ith6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 5 Pro-16ach6 | - | All | All | All |
| Hardware | Lenovo | Legion 5 Pro-16ach6h | - | All | All | All |
| Operating System | Lenovo | Legion 5 Pro-16ach6h Firmware | All | All | All | All |
| Operating System | Lenovo | Legion 5 Pro-16ach6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 5 Pro-16ith6 | - | All | All | All |
| Hardware | Lenovo | Legion 5 Pro-16ith6h | - | All | All | All |
| Operating System | Lenovo | Legion 5 Pro-16ith6h Firmware | All | All | All | All |
| Operating System | Lenovo | Legion 5 Pro-16ith6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 7-16achg6 | - | All | All | All |
| Operating System | Lenovo | Legion 7-16achg6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 7-16ithg6 | - | All | All | All |
| Operating System | Lenovo | Legion 7-16ithg6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion S7-15ach6 | - | All | All | All |
| Operating System | Lenovo | Legion S7-15ach6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion Y540-15irh | - | All | All | All |
| Hardware | Lenovo | Legion Y540-15irh-pg0 | - | All | All | All |
| Operating System | Lenovo | Legion Y540-15irh-pg0 Firmware | All | All | All | All |
| Operating System | Lenovo | Legion Y540-15irh Firmware | All | All | All | All |
| Hardware | Lenovo | Legion Y540-17irh | - | All | All | All |
| Hardware | Lenovo | Legion Y540-17irh-pg0 | - | All | All | All |
| Operating System | Lenovo | Legion Y540-17irh-pg0 Firmware | All | All | All | All |
| Operating System | Lenovo | Legion Y540-17irh Firmware | All | All | All | All |
| Hardware | Lenovo | Legion Y545 | - | All | All | All |
| Hardware | Lenovo | Legion Y545-pg0 | - | All | All | All |
| Operating System | Lenovo | Legion Y545-pg0 Firmware | All | All | All | All |
| Operating System | Lenovo | Legion Y545 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion Y7000-2019 | - | All | All | All |
| Hardware | Lenovo | Legion Y7000-2019-pg0 | - | All | All | All |
| Operating System | Lenovo | Legion Y7000-2019-pg0 Firmware | All | All | All | All |
| Operating System | Lenovo | Legion Y7000-2019 Firmware | All | All | All | All |
| Hardware | Lenovo | S145-14api | - | All | All | All |
| Operating System | Lenovo | S145-14api Firmware | All | All | All | All |
| Hardware | Lenovo | S145-14ast | - | All | All | All |
| Operating System | Lenovo | S145-14ast Firmware | All | All | All | All |
| Hardware | Lenovo | S145-14igm | - | All | All | All |
| Operating System | Lenovo | S145-14igm Firmware | All | All | All | All |
| Hardware | Lenovo | S145-14iil | - | All | All | All |
| Operating System | Lenovo | S145-14iil Firmware | All | All | All | All |
| Hardware | Lenovo | S145-15api | - | All | All | All |
| Operating System | Lenovo | S145-15api Firmware | All | All | All | All |
| Hardware | Lenovo | S145-15ast | - | All | All | All |
| Operating System | Lenovo | S145-15ast Firmware | All | All | All | All |
| Hardware | Lenovo | S145-15igm | - | All | All | All |
| Operating System | Lenovo | S145-15igm Firmware | All | All | All | All |
| Hardware | Lenovo | S145-15iil | - | All | All | All |
| Operating System | Lenovo | S145-15iil Firmware | All | All | All | All |
| Hardware | Lenovo | S14 G2 Itl | - | All | All | All |
| Operating System | Lenovo | S14 G2 Itl Firmware | All | All | All | All |
| Hardware | Lenovo | S540-13api | - | All | All | All |
| Operating System | Lenovo | S540-13api Firmware | All | All | All | All |
| Hardware | Lenovo | S540-13iml | - | All | All | All |
| Operating System | Lenovo | S540-13iml Firmware | - | All | All | All |
| Hardware | Lenovo | Slim 7 Pro-14ihu5 | - | All | All | All |
| Operating System | Lenovo | Slim 7 Pro-14ihu5 Firmware | - | All | All | All |
| Hardware | Lenovo | Slim 9-14itl05 | - | All | All | All |
| Operating System | Lenovo | Slim 9-14itl05 Firmware | - | All | All | All |
| Hardware | Lenovo | V14-ada | - | All | All | All |
| Operating System | Lenovo | V14-ada Firmware | All | All | All | All |
| Hardware | Lenovo | V14-are | - | All | All | All |
| Operating System | Lenovo | V14-are Firmware | All | All | All | All |
| Hardware | Lenovo | V14-igl | - | All | All | All |
| Operating System | Lenovo | V14-igl Firmware | All | All | All | All |
| Hardware | Lenovo | V14-iil | - | All | All | All |
| Operating System | Lenovo | V14-iil Firmware | All | All | All | All |
| Hardware | Lenovo | V140-15iwl | - | All | All | All |
| Operating System | Lenovo | V140-15iwl Firmware | All | All | All | All |
| Hardware | Lenovo | V14 G1-iml | - | All | All | All |
| Operating System | Lenovo | V14 G1-iml Firmware | All | All | All | All |
| Hardware | Lenovo | V14 G2-acl | - | All | All | All |
| Operating System | Lenovo | V14 G2-acl Firmware | All | All | All | All |
| Hardware | Lenovo | V14 G2-itl | - | All | All | All |
| Operating System | Lenovo | V14 G2-itl Firmware | All | All | All | All |
| Hardware | Lenovo | V15-ada | - | All | All | All |
| Operating System | Lenovo | V15-ada Firmware | All | All | All | All |
| Hardware | Lenovo | V15-igl | - | All | All | All |
| Operating System | Lenovo | V15-igl Firmware | All | All | All | All |
| Hardware | Lenovo | V15-iil | - | All | All | All |
| Operating System | Lenovo | V15-iil Firmware | All | All | All | All |
| Hardware | Lenovo | V15 G1-iml | - | All | All | All |
| Operating System | Lenovo | V15 G1-iml Firmware | All | All | All | All |
| Hardware | Lenovo | V15 G2-alc | - | All | All | All |
| Operating System | Lenovo | V15 G2-alc Firmware | All | All | All | All |
| Hardware | Lenovo | V15 G2-itl | - | All | All | All |
| Operating System | Lenovo | V15 G2-itl Firmware | All | All | All | All |
| Hardware | Lenovo | V17-iil | - | All | All | All |
| Operating System | Lenovo | V17-iil Firmware | All | All | All | All |
| Hardware | Lenovo | V17 G2-itl | - | All | All | All |
| Operating System | Lenovo | V17 G2-itl Firmware | All | All | All | All |
| Hardware | Lenovo | V340-17iwl | - | All | All | All |
| Operating System | Lenovo | V340-17iwl Firmware | All | All | All | All |
| Hardware | Lenovo | Yoga 7-14acn6 | - | All | All | All |
| Operating System | Lenovo | Yoga 7-14acn6 Firmware | All | All | All | All |
| Hardware | Lenovo | Yoga C740-14iml | - | All | All | All |
| Operating System | Lenovo | Yoga C740-14iml Firmware | All | All | All | All |
| Hardware | Lenovo | Yoga C740-15iml | - | All | All | All |
| Operating System | Lenovo | Yoga C740-15iml Firmware | All | All | All | All |
| Hardware | Lenovo | Yoga C940-14iil | - | All | All | All |
| Operating System | Lenovo | Yoga C940-14iil Firmware | - | All | All | All |
| Hardware | Lenovo | Yoga Slim 7 Pro-14ach5 | - | All | All | All |
| Hardware | Lenovo | Yoga Slim 7 Pro-14ach5 D | - | All | All | All |
| Operating System | Lenovo | Yoga Slim 7 Pro-14ach5 D Firmware | All | All | All | All |
| Operating System | Lenovo | Yoga Slim 7 Pro-14ach5 Firmware | All | All | All | All |
| Hardware | Lenovo | Yoga Slim 7 Pro-14ach5 O | - | All | All | All |
| Hardware | Lenovo | Yoga Slim 7 Pro-14ach5 Od | - | All | All | All |
| Operating System | Lenovo | Yoga Slim 7 Pro-14ach5 Od Firmware | All | All | All | All |
| Operating System | Lenovo | Yoga Slim 7 Pro-14ach5 O Firmware | All | All | All | All |
| Hardware | Lenovo | Yoga Slim 7 Pro-14arh5 | - | All | All | All |
| Operating System | Lenovo | Yoga Slim 7 Pro-14arh5 Firmware | All | All | All | All |
| Hardware | Lenovo | Yoga Slim 7 Pro-14ihu5 | - | All | All | All |
| Operating System | Lenovo | Yoga Slim 7 Pro-14ihu5 Firmware | - | All | All | All |
| Hardware | Lenovo | Yoga Slim 7 Pro-14ihu5 O | - | All | All | All |
| Operating System | Lenovo | Yoga Slim 7 Pro-14ihu5 O Firmware | - | All | All | All |
| Hardware | Lenovo | Yoga Slim 7 Pro-14itl5 | - | All | All | All |
| Operating System | Lenovo | Yoga Slim 7 Pro-14itl5 Firmware | - | All | All | All |
| Hardware | Lenovo | Yoga Slim 9-14itl05 | - | All | All | All |
| Operating System | Lenovo | Yoga Slim 9-14itl05 Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Lenovo Notebook BIOS Vulnerabilities - Lenovo Support US | MISC | support.lenovo.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
LEGACY: Lenovo thanks Martin Smolár from ESET for reporting this issue.
There are currently no legacy QID mappings associated with this CVE.